Introduction to the method of PHP supporting CURL string certificate transmission (code)-PHP Tutorial-php.cn

Introduction to the method of PHP supporting CURL string certificate transmission (code)

不言

Release： 2023-04-05 17:38:01

forward

2486 people have browsed it

This article brings you an introduction to the method (code) for PHP to support CURL string certificate transmission. It has certain reference value. Friends in need can refer to it. I hope it will help You helped.

Recently, when connecting to WeChat payment, a certificate needs to be used at the refund point. Since we are a SAAS platform, we need to support multi-party and multi-channel payments. If we save all certificate files in the application server, it will be affected by SLB. , will cause the files on a certain machine to be out of sync and hinder the refund process. However, if the files are stored in OSS, the backend must download them from OSS to the application server to ensure consistency. After much deliberation, we finally decided to save the certificate content in the database. Different customers correspond to one certificate file. No matter how many machines are used in the cluster, the consistency of the file can be ensured and redundant downloading steps can be avoided.

Problem

But I encountered a problem just after I did it. PHP's CURL certificate does not support the transmission of strings, and can only fill in the certificate path (the following is the official statement)

Client certificates must be specified by a path expression to a certificate store.

Solution process

My first thought is to create a blank file and write the certificate content Go in, wait for the certificate to be used, and then delete the file. However, the operation of creating an entity file and then deleting it consumes performance and is very troublesome. Is there a way to create a temporary file? Yes, the tmpfile() function can help us create a temporary file and get the file path, so I wrote a method to get the temporary file path

<?php
    public function getTmpPathByContent($content)
    {
        $tmpFile = tmpfile();
        fwrite($tmpFile, $content);
        $tempPemPath = stream_get_meta_data($tmpFile);
        return $tempPemPath[&#39;uri&#39;];  ///tmp/phpXZCtAO
    }
?>

Copy after login

What is sad is that through this The content of the path returned by the method cannot be read at all. I even thought that I had been cheated.

file_get_contents(/tmp/phpyyiOZv): failed to open stream: No such file or directory

Copy after login

I found the reason after reading the official documentation. Iftmpfile()the handle reference count returned is 0 If so, the temporary file will be recycled, and the temporary path will naturally become invalid. Obviously, after the method getTmpPathByContent() is executed, the life cycle of the local variable $tmpFile will end (official document As follows)

The file is automatically removed when closed (for example, by calling fclose(), or when there are no remaining references to the file handle returned by tmpfile()), or when the script ends.

After confirming the root cause, we now urgently need to find a variable type whose life cycle terminates when the process ends to save the handle. What type can meet the conditions? static variables. The difference between static variables and local variables is that memory space is allocated for them at the beginning of the PHP life cycle and stored in the global variable area. Global variables are destroyed during the module shutdown phase. In this case, declare static variables You can make $tmpFile the reference count continue to remain greater than 0, then our code can do the following processing

<?php
    public function getTmpPathByContent($content)
    {
        static $tmpFile = null;
        $tmpFile = tmpfile();
        fwrite($tmpFile, $content);
        $tempPemPath = stream_get_meta_data($tmpFile);
        return $tempPemPath[&#39;uri&#39;];
    }
?>

Copy after login

Execute it again and successfully read the contents of the temporary file

Copy after login

Now you can set the generated temporary file address to CURLOPT_SSLCERT

<?php
    $sslCertPath = getTmpPathByContent($content);
    curl_setopt($ch,CURLOPT_SSLCERT, $sslCertPath);
    //......
?>

Copy after login

This article is all over here, you can pay attention to more other exciting content The php video tutorial column of the PHP Chinese website!

The above is the detailed content of Introduction to the method of PHP supporting CURL string certificate transmission (code). For more information, please follow other related articles on the PHP Chinese website!